This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: j9Cd8NaLYjEA6fyTOtKnEqpjgASwLGi0Y80EtKGhJLM= Subject key identifier: BE:CD:58:8A:2E:DC:F1:E3:05:B1:E8:73:A6:86:CE:24:BF:95:96:81 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 24E38AFDE454D0BD605204162D8AB34DFAC6539A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 04B4 Signing time: Sun 07 Dec 2025 00:32:04 +0000 Manifest this update: Sun 07 Dec 2025 00:27:04 +0000 Manifest next update: Wed 10 Dec 2025 07:16:04 +0000 Files and hashes: 1: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: XVtvOcvtr0gsO40D3WKeX6ayW4vYVdKRoiOCH4U5yQA=) 2: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 3: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 4: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 5: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e3:8a:fd:e4:54:d0:bd:60:52:04:16:2d:8a:b3:4d:fa:c6:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Dec 7 00:27:04 2025 GMT Not After : Dec 10 07:16:04 2025 GMT Subject: CN=BECD588A2EDCF1E305B1E873A686CE24BF959681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:06:46:79:52:fd:9d:de:5e:18:ee:7e:95: 9f:1b:04:3f:cb:6d:7f:63:44:a3:51:6f:d0:42:0b: 38:30:43:8c:a4:e2:79:e0:ea:32:94:02:e4:b8:f0: 5f:53:9d:cf:58:37:2d:fc:d2:98:98:af:2d:a4:00: 73:0c:43:2f:bc:af:46:60:1e:4f:54:dd:70:8b:5e: da:e9:62:d8:2f:7e:a3:5f:c6:71:32:2c:45:0c:68: ff:0e:40:02:b3:d6:87:ff:9b:0d:36:f2:36:a6:f4: 29:dc:cf:0e:bc:e9:37:de:5e:e5:e4:9d:05:6e:f9: ce:71:87:0c:ea:7f:b7:b4:14:66:30:65:7a:f5:74: 40:fa:17:3d:91:57:1c:fa:c2:d8:58:3c:84:72:d2: 6a:eb:47:46:3f:21:2a:4d:4e:cd:98:41:18:26:82: e2:c1:66:82:4a:f0:03:96:ae:ec:8a:ca:c2:01:30: db:15:1d:89:66:1a:0e:60:9f:bd:64:d5:d5:e0:c6: 28:40:69:7d:a5:c5:3b:6b:2a:53:31:25:2e:37:57: ca:36:f9:5d:14:ba:bf:77:d0:ae:de:a9:24:39:35: b6:7d:30:25:82:9c:5f:8d:39:a6:80:55:8a:c7:c9: e8:d8:9a:d8:6b:e7:73:8e:80:86:69:ee:21:ca:64: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CD:58:8A:2E:DC:F1:E3:05:B1:E8:73:A6:86:CE:24:BF:95:96:81 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:56:63:dc:69:13:d0:c7:42:40:6e:1d:b0:4f:94:05:78:f3: 2b:7b:89:5d:84:f3:dc:d4:dc:6d:8f:36:f2:e4:75:11:81:39: ac:15:64:4c:de:43:f4:87:ac:1d:23:b1:6a:ee:18:db:2f:ba: 4f:cf:2a:ae:2e:41:38:d7:2a:63:fa:b0:ae:33:b9:e6:97:ea: 19:0a:fe:49:3a:43:c4:c6:33:dd:96:29:12:30:81:8b:ff:de: a6:8a:b8:14:23:20:09:21:2e:f5:0b:e2:c5:e8:f2:15:35:c4: 84:00:3f:85:58:9d:8f:6f:25:4b:ab:62:d0:b5:07:4d:8c:85: 39:90:b1:7d:eb:34:7d:11:9e:26:17:03:21:b0:e6:d7:3a:fd: 7b:39:ff:b9:10:39:98:8e:d4:a2:14:b6:09:a7:4e:28:f3:51: 24:5a:32:53:c6:7c:fd:9d:6b:0e:0d:5a:6c:b6:ad:0c:a6:75: e8:33:e6:1d:a7:8a:58:a2:66:df:47:a8:a3:48:86:02:f1:cb: b2:34:a3:66:c7:82:c9:4c:a0:1c:bb:f1:98:21:a8:91:0c:91: c3:60:ae:39:ce:38:6e:04:19:11:28:94:69:8c:3a:f6:b2:16: 2c:69:0d:92:eb:6a:eb:02:10:43:4c:31:ec:05:1d:24:50:c1: b8:26:6f:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOOK/eRU0L1gUgQWLYqzTfrGU5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTEyMDcwMDI3MDRaFw0yNTEyMTAwNzE2MDRaMDMxMTAvBgNV BAMTKEJFQ0Q1ODhBMkVEQ0YxRTMwNUIxRTg3M0E2ODZDRTI0QkY5NTk2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WgZGeVL9nd5eGO5+lZ8bBD/L bX9jRKNRb9BCCzgwQ4yk4nng6jKUAuS48F9Tnc9YNy380piYry2kAHMMQy+8r0Zg Hk9U3XCLXtrpYtgvfqNfxnEyLEUMaP8OQAKz1of/mw028jam9Cnczw686TfeXuXk nQVu+c5xhwzqf7e0FGYwZXr1dED6Fz2RVxz6wthYPIRy0mrrR0Y/ISpNTs2YQRgm guLBZoJK8AOWruyKysIBMNsVHYlmGg5gn71k1dXgxihAaX2lxTtrKlMxJS43V8o2 +V0Uur930K7eqSQ5NbZ9MCWCnF+NOaaAVYrHyejYmthr53OOgIZp7iHKZDRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvs1Yii7c8eMFsehzpobOJL+VloEwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5WY9xpE9DHQkBuHbBPlAV48yt7iV2E89zU 3G2PNvLkdRGBOawVZEzeQ/SHrB0jsWruGNsvuk/PKq4uQTjXKmP6sK4zueaX6hkK /kk6Q8TGM92WKRIwgYv/3qaKuBQjIAkhLvUL4sXo8hU1xIQAP4VYnY9vJUurYtC1 B02MhTmQsX3rNH0RniYXAyGw5tc6/Xs5/7kQOZiO1KIUtgmnTijzUSRaMlPGfP2d aw4NWmy2rQymdegz5h2niliiZt9HqKNIhgLxy7I0o2bHgslMoBy78ZghqJEMkcNg rjnOOG4EGREolGmMOvayFixpDZLrausCEENMMewFHSRQwbgmbwk= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:04 2025 by rpki-client